b3a1f805a823c5914357520277cdc42b[.]exe

Sharing

Copy URL Twitter E-mail

General

Target
b3a1f805a823c5914357520277cdc42b.exe
Size 311KB
Sample230701-tagtxaha64
SHA256 e4bb056a390bf88d2e2b2f578b5a4cbb6b4eb9d19a8f7998642bd46585bd99ec
MD5 b3a1f805a823c5914357520277cdc42b
SHA1 d08444db1f7ac21e0ef9e11afbcf61adcf1da7e9
SHA512 e148e4749556c809df2cbef3864530192d3eb975d4dfef62e15df7c743fe3a73b4c10adfbed43e9cb19142f6c5ed4a6fbb173c9de6af3d56e87b59ccb323b7b7
SSDEEP 3072:QpXrKszh70BmVK07RhGBjDO29bLS+G5A3G7EHpdiw4dFZil5m9VZwR1zahPTET:ybKszqOKxj1vQAWaypFZ39AjgPTE
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b3a1f805a823c5914357520277cdc42b.exe

File Explorer

b3a1f805a823c5914357520277cdc42b.exe

.exe 311KB

b3a1f805a823c5914357520277cdc42b.exe

IMPHASH 3f78d2c1ecc9c9539d7f7d65d50271a7
SHA256 e4bb056a390bf88d2e2b2f578b5a4cbb6b4eb9d19a8f7998642bd46585bd99ec
MD5 b3a1f805a823c5914357520277cdc42b
SHA1 d08444db1f7ac21e0ef9e11afbcf61adcf1da7e9
SHA512 e148e4749556c809df2cbef3864530192d3eb975d4dfef62e15df7c743fe3a73b4c10adfbed43e9cb19142f6c5ed4a6fbb173c9de6af3d56e87b59ccb323b7b7
SSDEEP 3072:QpXrKszh70BmVK07RhGBjDO29bLS+G5A3G7EHpdiw4dFZil5m9VZwR1zahPTET:ybKszqOKxj1vQAWaypFZ39AjgPTE
MD5 SHA1 SHA512 SSDEEP

windows x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

17226

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetProfileIntW DeleteVolumeMountPointA EnumCalendarInfoW GetLogicalDriveStringsW UnlockFile SetCommBreak GetTickCount GetConsoleAliasesA GetNumberFormatA GetCompressedFileSizeW ClearCommBreak TlsSetValue FindResourceExA GlobalAlloc LoadLibraryW CopyFileW GetSystemWindowsDirectoryA GetStringTypeExW EnumSystemCodePagesA FindNextVolumeW MulDiv GetVolumePathNameA GetDevicePowerState SetLocaleInfoA SetCurrentDirectoryA OpenMutexW GetLongPathNameW SetLastError GetProcAddress BeginUpdateResourceW EnumDateFormatsExA CreateMemoryResourceNotification LoadLibraryA CreateFileMappingA CreateHardLinkW BeginUpdateResourceA SetProcessWorkingSetSize HeapWalk GetModuleHandleA ReadConsoleInputW GetWindowsDirectoryW CloseHandle CreateFileA FlushFileBuffers WriteConsoleW GetConsoleOutputCP GetDateFormatW CreateMutexW ReplaceFileA WriteConsoleA SetStdHandle UnhandledExceptionFilter SetUnhandledExceptionFilter MultiByteToWideChar GetModuleHandleW Sleep ExitProcess GetCommandLineA GetStartupInfoA GetLastError WriteFile GetStdHandle GetModuleFileNameA GetCPInfo InterlockedIncrement InterlockedDecrement GetACP GetOEMCP IsValidCodePage TlsGetValue TlsAlloc TlsFree GetCurrentThreadId TerminateProcess GetCurrentProcess IsDebuggerPresent HeapAlloc HeapFree EnterCriticalSection LeaveCriticalSection HeapSize DeleteCriticalSection InitializeCriticalSectionAndSpinCount FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW WideCharToMultiByte GetEnvironmentStringsW SetHandleCount GetFileType HeapCreate VirtualFree QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime LCMapStringA LCMapStringW GetStringTypeA GetStringTypeW GetLocaleInfoA SetFilePointer GetConsoleCP GetConsoleMode VirtualAlloc HeapReAlloc RtlUnwind RaiseException

user32

GetClipboardOwner CharToOemBuffA DdeCreateStringHandleA GetMenuBarInfo LoadMenuA CharUpperBuffA DdeQueryStringA

gdi32

GetCharABCWidthsI

advapi32

InitializeAcl

winhttp

WinHttpQueryHeaders